Hi All,
Does anyone have a Globalprotect PreLogon setup with SAML authentication and CRL enabled?
Having issues with this and have it raised with TAC but thought I'd reach out to the community.
It's worth noting that we have a parallel setup using LD
...
Hi All,
Quick set of questions?
We have a Globalprotect deployment on PreLogon for one of our user sets. Accompanying this we have deployed a separate gateway/Portal for Clientless VPN. Both Authenticating with LDAP. They have requested 2FA for their
...
I managed to get GP VPN setup on my PA220 and get a Windows workstation to connect to it. It gets assigned one of the IP addresses reserved for VPN clients. When I attempt to connect RDP to a remote machines from this VPN client it fails. The VPN
...
Global Protect VPN worked fine till now with mobile hotspot or wireless dongle. From past 3-4 days, I am not able to connect to the gateway at all. Even the login popup doesn't come up. It works with broadband but not with wireless. Can someone help?
...
Hello,
I have tried searching and must be missing something.
I am trying to block a user from attaching Global Protect. From what I have read you should be able to go to Network>GlobalProtect>Device Block List and add the device\user to the list. The i
...
I want to add a new Azure AD SAML identity provider which I will be using to create a new authentication profile. This profile would be used for creating new global protect portal using same gateway but allowing only set of access routes.
I wanted to
...
GP on the fw is setup and working. I have a group of users i need to isolate from everyone else - most of the time.So if they use the url vpn1.mydomain.com they get IP Pool X and specific X policies. If they use url vpn2.mydomain.com they get IP Pool
...
I have different purpose (new certificate with different CN) to create a new/parallel portal&gateway (to keep the change transparent for end user/and to keep easy revert back possibilities in worst case), so when i try to create a new por+gw by addin
...
Hi all,
I need a clarify about GP Portal license and GP Gateway license. Which one is needed for clientless VPN?
I have this PA-850 and running on PanOS 9.0.13, on support portal it shown that I have GP Gateway license active but GP Portal license is
...
Good morning! First time posting here. We are seeing an issue with our GP users in that some cannot connect while other can with out issue. The error that we are seeing is that the agent is unable to establish a connection to the gateways. We several
...
Trying to get the GP agent running on linux (Ubuntu 20.04) and keep crashing into SAML auth issues. The GUI client opens a PanGPUI internal browser window that starts to show a google auth page and promptly hangs with 100% CPU utilization, and the CL
...
We are facing the issue only when users connect to the VPN using GP.
I don't know what is the root cause but all logs and errors are related to Windows search.
I have other pcs with errors related to fwpkclnt.sys and netio.sys.
Is there anyone else wi
...
My old account was fixed by Palo Alto life community following article https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNHCA0 , so I am resharing the post for "Knowledge sharing: Globalprotect troubleshooting/investgation.
...
I've read a few posts on Split Tunnel by Domain Name. But so far I am only able to get
specific routes to work and not split tunneling by domain name. My test is ipchicken.com
as traffic to it will reveal either my home IP as the source or the corpora
...
When looking at the globalprotect logs within the monitor tab on my PA-3220 running 10.1.3 some clients are reporting the incorrect GP version. I have lots listed as running version 5.1.0. We currently don't have any workstations running that version
...
on:
GlobalProtect quarantine
on:
Checking if Global Protect is active (connected) via script or command line
on:
SSL Handshake Failed
on:
Support for Ubuntu LTS versions (especially 20.04 and 22.04)
